OAuth 2.0 Implicit Flow Detector

OAuth 2.0 Implicit Flow Detector

Detect sites using the OAuth 2.0 implicit Flow The Implicit flow has been essentially deprecated due to security issues and should no longer be used.

OAuth 2.0 Implicit Flow Detector promo image
What is OAuth 2.0 Implicit Flow Detector?

OAuth 2.0 Implicit Flow Detector is a Firefox add-on that detects websites using the OAuth and OIDC protocols to manage web authentication and authorization. It identifies when a website is using the deprecated Implicit Flow and promotes security consciousness for everyday web usage.

Merlin
Stats
Stats date:
Users: 66 ▼ -1
Version: 0.1.4 (Last updated: 2020-08-25)
Creation date: 2020-02-01
Weekly download count: 4
Firefox on Android: No
Manifest version: 2
Permissions:
  • webRequest
  • webRequestBlocking
  • https://*/*
Size: 75.04K
Email: Click to see
URLs: Website
Risk impact: High risk impact
Risk likelihood: Low risk likelihood

Other platforms

Not available on Chrome
Not available on Edge
Merlin
Summary

Detect sites using the OAuth/OpenID Connect Implicit Flow.

Many websites use the OAuth and OIDC protocols (https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth) to manage web authentication and authorization.

While these standards are the best practice for web developers, many sites are still relying on the now deprecated Implicit flow (https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead) which isn't considered secure 🙁

This extension detects when a website is using the Implicit Flow and lets you know. It's a great way to stay conscious of the security of websites you use every day.

Safety
Risk impact

OAuth 2.0 Implicit Flow Detector is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this add-on. Review carefully before installing. We recommend that you only install OAuth 2.0 Implicit Flow Detector if you trust the publisher.

Risk likelihood

OAuth 2.0 Implicit Flow Detector has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details
Screenshots